Overview

overview

7

Static

static

HackRay.dll

ubuntu-18.04-amd64

LOL幻想....3.exe

windows7-x64

7

LOL幻想....3.exe

windows10-2004-x64

7

PC6游戏下载.url

windows7-x64

1

PC6游戏下载.url

windows10-2004-x64

1

ʹ˵.htm

windows7-x64

1

ʹ˵.htm

windows10-2004-x64

1

СϷ.htm

windows7-x64

1

СϷ.htm

windows10-2004-x64

1

....htm

windows7-x64

1

....htm

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1aaf6a3d0ed79c12d0eb0371ba42fe74123c13b0bac6d777dae3bf6e32daafee

  • Size

    2.5MB

  • Sample

    221127-hmlsvabf3z

  • MD5

    5f294294dd42e85eba9a5c2363ad28aa

  • SHA1

    83150e47d78761e6997ac4a869c7d9aa504304d6

  • SHA256

    1aaf6a3d0ed79c12d0eb0371ba42fe74123c13b0bac6d777dae3bf6e32daafee

  • SHA512

    d2d252053ecd5647223202918bebb61263976ecebd4fc2df2b2b3d66a66889c8f726fb817106374dd3fd81dac68f8127f6830fa638d1d3bbb87115a8bcad8ea8

  • SSDEEP

    49152:mp720t/lTWfWAJUBeep114aL5uVNdIvKCs2rI8RrEUEDGtIDoNL:yLNQROL14aL5aIs3CE7od

Score
7/10
linux

Malware Config

Targets

    • Target

      HackRay.dll

    • Size

      1.0MB

    • MD5

      5b34018f3613def3e2d1bbb4904fbea8

    • SHA1

      ccb9eb0a7dc5269e4fc771cc7b53efffaa090fb3

    • SHA256

      3eb1347e061beb81cef3b991a2a2363bc83fb371f8b536683c3890b7c53ac882

    • SHA512

      1b92530173517e06a5ae7cfda70f9622deef8c0e84faab74ff564083e17e82f532e4e78e6ad6553dd74fed3390687b12f80e4acbc995bd40d6f563809065d7cd

    • SSDEEP

      24576:kLewfW1fil8KupGavkg3NyYsbbbY2BAUZLYirruTL4rHZxd:+eUOg8KupGaXXv2BAUZLYgruIz3d

    Score
    1/10
    behavioral1

    • Target

      LOL幻想全能辅助3.3.exe

    • Size

      1.8MB

    • MD5

      883d42865c9f8ccb6940c8d6d242c5a6

    • SHA1

      1ec62c8c9aca9bff8bffd60152d90b06ee8df567

    • SHA256

      7dbc65d2450a76c84b725a34af39831a4f44c35db6284a32782b6ca737bfca0b

    • SHA512

      92a107392b2f2b244d2ae37ab1a154be4507632ec958e9e4ada9d6b22fbead86f93a2af2fab0a52ab8aa8c2d72fcc6ac9c695c3074ace959a2f15b5af6ca1f27

    • SSDEEP

      49152:VrzT1ucld2Vp112Wu1d1bfFr5ZmQ/H9Hl8XX:JP1ucldg1CfRNmQvROn

    Score
    7/10

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral2behavioral3

    • Target

      PC6游戏下载.url

    • Size

      174B

    • MD5

      d76001a5ed4ce5e47a7bd36b0d327ab4

    • SHA1

      6405521c578f5035d2beffdb8f2ee953dde52cda

    • SHA256

      df3b263ac4f5236965999fed8b4baaee9c96f5c804ad71cc20ab9ec34706970d

    • SHA512

      8eef095cd7d24ec8cc17820363b0f61c704c570297ec41f622705f9dc23db379ae399906653fb79fa71fd327ac83aafa4d04b4d728e110c447dc4d391c5b501d

    Score
    1/10
    behavioral4behavioral5

    • Target

      ʹ˵.htm

    • Size

      1KB

    • MD5

      11f9b79e1dd88bc67967b5d65c2f0d00

    • SHA1

      9152dbf2c9a76e0a3ce355e73ebc95c2405a384e

    • SHA256

      a0c87ad3fcd851480dc1133bf229b6f4bb582b0584cda05e26b86495225f336b

    • SHA512

      8adb8f3f5441ae310ae89e7067db57576e831332bbec5a0afa3bf82ef843e33f0c28aaecd1d69b7e022a91554d3a79876ef4f3c53c79c999f13c27c65fcefce5

    Score
    1/10
    behavioral6behavioral7

    • Target

      СϷ.htm

    • Size

      83B

    • MD5

      b143bdf85dc53882a1ac17e88e504fb3

    • SHA1

      bfbf4601394b4b99021d47b025022c63e46864b4

    • SHA256

      0d187ce67e96877e558b039b6db240fdaa513160a510d70bfebe51af50b8f8b6

    • SHA512

      ed1169fcd5bcc0500f2c8ce86fbd7470cdd4390386f93ee7be4c1128312d3c1c1aeeffd42260d5c0113cb640c28f9ee9f14f45b1dd1e16f4ed7a3f255502f319

    Score
    1/10
    behavioral8behavioral9

    • Target

      ϼ.htm

    • Size

      88B

    • MD5

      5967ad35d7f881dbf791d0ed77426d6f

    • SHA1

      3f1402ab9518330034a556e3e49433ca5ce6fe1b

    • SHA256

      cdbe65a81ff04a5a6412ad0deea549418e22fa3207a7ad94b01172d1ce69aefc

    • SHA512

      65ee6b0bd1fa9e902b7e3803eb714ce5443539ca780807082bfc84cff2364a44e2b82a446f838fed88edb3445b2fc8e693db0a80a877f30f76415a3000ee3e56

    Score
    1/10
    behavioral10behavioral11

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks